(12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(19) World Intellectual Property Organization 
International Bureau 

(43) International Publication Date 
18 October 2001 (18.10.2001) 




PCT 



iiiiiiiiDniuiiiiffliiiiiiiiii 

(10) International Publication Number 

WO 01/78386 A2 



(51) International Patent Classification 7 : H04N 5/913 

(21) International Application Number: PCT/EP01/03184 

(22) International Filing Date: 20 March 2001 (20.03.2001) 

(25) Filing Language: English 

(26) Publication Language: English 

(30) Priority Data: 

00201 276.3 7 April 2000 (07.04.2000) EP 

0020401 9.4 1 5 November 2000 ( 1 5. 1 1 .2000) EP 

(71) Applicant (for all designated States except US): IRDETO 
ACCESS B.V. [NL/NL]; Jupiterstraat 42, NL-2132 HD 
Hoofddorp (NL). 

(72) Inventor; and 

(75) Inventor/Applicant (for US only): WAJS, Andrew, Au- 
gustine [GB/NL]; Schotersingel 93, NL-2023 AA Haarlem 
(NL). 



(81) Designated States (national): AE, AG, AL, AM, AT, AU, 
AZ, BA, BB, BG, BR, BY, BZ, CA, CH, CN, CO, CR, CU. 
CZ, DE, DK, DM, DZ, EE, ES, FI, GB, GD, GE, GH, GM, 
HR, HU, ID, IL, IN, IS, JP, KE, KG, KP, KR, KZ, LC, LK, 
LR, LS, LT, LU, LV, MA, MD, MG. MK, MN, MW, MX, 
MZ, NO, NZ, PL, PT, RO, RU, SD, SE, SG, SI, SK, SL, 
TJ, TM, TR, IT, TZ, UA, UG, US, UZ, VN, YU, ZA, ZW. 

(84) Designated States (regional): ARIPO patent (GH, GM, 
KE, LS, MW, MZ, SD, SL, SZ, TZ, UG, ZW), Eurasian 
patent (AM, AZ, BY, KG, KZ, MD. RU, TJ, TM), European 
patent (AT, BE, CH, CY, DE, DK, ES, FI, FR, GB, GR, IE, 
IT, LU, MC, NL, PT, SE, TR), OAPI patent (BF, BJ, CF, 
CG, Q, CM, GA, GN, GW, ML, MR, NE, SN, TD, TG). 

Published: 

— without international search report and to be republished 
upon receipt of that report 

For two-letter codes and other abbreviations, refer to the "Guid- 
ance Notes on Codes and Abbreviations" appearing at the begin- 
ning of each regular issue of the PCT Gazette. 



(74) Agent: DE VRIES, JOHANNES, HENDRIK, FOKKE; 

De Vries & Metman, Overschiestraat 180, NL-1062 XK 
Amsterdam (NL). 



= (54) Title: SYSTEM FOR SCRAMBLING CONTENT, AND SYSTEM FOR DESCRAMBLING SCRAMBLED CONTENT 




< 

0© 
00 

f- 




o 



(57) Abstract A system provides content as a data packet stream, each data packet containing at least one address. A first processing 
unit has at least one input receiving the content data packet stream. The processing unit is programmed to divide the data packets of 
the content data packet stream on at least two or more of a number of outputs. One output is connected to scrambler to scramble the 
data packets. In a system a scrambler is programmed with a first algorithm for selecting sections from the content. The scrambler 
passes the selected sections unscrambled, wherein the scrambled content with the selected sections can be processed according to a 
second algorithm A system for descrambling scrambled content comprises a signal processor for descrambling received or stored 
scrambled content This processor is programmed with the second algorithm to scan the scrambled content for unscrambled sections 
and to process at least these sections. 
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System for scrambling content, and system for descrambling 
scrambled content 

The invention generally relates to the processing of 
scrambled content and more particularly to a system for scram- 
bling content according to the preamble of claims 1 and 6, and 
to a system for descrambling scrambled content according to 
5 the preamble of claim 12 . 

Systems for providing scrambled content are used for 
example for providing video on demand services to receivers. 
Generally, obtaining video on demand requires a payment by the 
receiver so that unauthorised use of the video on demand con- 

10 tent has to be prevented. To this end, the content will be 
scrambled before delivery to the receiver (s) requesting a 
video on demand service. In case of high speed digital data 
streams, providing a scrambled transport stream of data pack- 
ets involves the use of sophisticated scrambling devices in- 

15 creasing the cost of the system. 

Recently receiving equipment has been provided with 
storage devices with large capacity allowing hours of content, 
such as video, audio and still images to be stored. With the 
storage of such content in a storage device, it is desirable 

20 that the content remains scrambled after it has been received 
from a broadcast network, or downloaded from the Internet, for 
example. This is crucial for services using conditional access 
to allow use of the content by subscribers only, for example 
for services such as video on demand. However at the same time 

25 it is also desirable to allow processing of the video and 
audio content. Such processing may include jumping into the 
stream of content at certain points, changing the compression 
rate, displaying frames during fast forwarding or rewinding 
and adding watermarks or fingerprints to the content. In prior 

3 0 art systems these two requirements are contradictory, i.e. it 
is not possible to process the content when it is scrambled. 
Further, the descrambler used in prior art receiving equipment 
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requires a high processing capacity for descrambling the 
scrambled content. A descrambler can be made as a special pur- 
pose circuit or a signal processor with high processing capac- 
ity to meet this requirement. 
5 It is an object of the invention to provide a system 

of this type which is adapted to scramble high speed digital 
data streams at low cost. 

Further, it is an object of the invention to provide 
a system for scrambling content of the above-mentioned type 
10 allowing processing of the content despite the content being 
scrambled. 

A further object of the invention is to provide a 
system for scrambling content of the above-mentioned type al- 
lowing an improvement of descrambling performance at reduced 

15 processing capacity. 

It is a further object of the invention to provide a 
system for descrambling scrambled content having means adapted 
to process the scrambled content. 

According to a first aspect the invention provides a 

2 0 system for providing scrambled content, wherein the content is 
a data packet stream, each data packet containing at least one 
address, the system comprising a first processing unit having 
at least one input adapted to receive the content data packet 
stream to be scrambled, and a plurality of outputs, wherein 

25 the processing unit is programmed to divide the data packets 
of the content data packet stream over at least two or more of 
the outputs, wherein at least one output is connected to a 
corresponding scrambler to scramble the data packets received 
from this output. 

30 In this manner a system for providing scrambled con- 

tent is obtained, wherein by scrambling only a part of the in- 
put data packet stream, a scrambler can be used with a rela- 
tively low scrambling processing capacity. Moreover, a scram- 
bler of low cost can be used and, if required, two or more 

35 outputs can have a scrambler connected to the same. Further, 
the processing unit is relatively simple as the processing 
unit only has to divide the data packets of the content data 
packet stream on the outputs. Moreover, the partially scram- 
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bled content allows a signal processor of the descrarnbling 
system to descramble the content to obtain the clear content 
at a reduced processing capacity. In this manner the cost of 
the descrarnbling system can be reduced. Sophisticated algo- 
5 rithms can be used in the descrarnbling system allowing prede- 
termined processing of the partially scrambled content. 

According to an alternative embodiment of the inven- 
tion a system for scrambling content is provided, comprising a 
scrambler for scrambling the content, characterized in that 

10 the scrambler is programmed with a first algorithm for select- 
ing sections from the content to be scrambled, wherein the 
first algorithm controls the scrambler to pass the selected 
sections unscrambled, wherein the selecting algorithm is such 
that the scrambled content with the selected sections can be 

15 processed according to a second algorithm. 

In a second aspect of the invention a system for de- 
scrambling scrambled content is provided, comprising means for 
storing scrambled content, and a signal processor for descrarn- 
bling received or stored scrambled content, characterized in 

2 0 that the signal processor is programmed with the second algo- 
rithm to scan the received and/or stored scrambled content for 
unscrambled sections and to process at least the unscrambled 
sections . 

The invention will be further explained by reference 

2 5 to the drawing in which embodiments of the systems of the in- 

vention are shown in a very schematically manner. 

Fig. 1 shows a first embodiment of a scrambling sys- 
tem of the invention. 

Fig. 2 shows a diagram with an embodiment of a scram- 

3 0 bling system and an embodiment of a descrarnbling system of the 

invention. 

Referring to fig. 1 there is shown a system adapted 
to provide content to one or more receivers, for example a 
video on demand. The system comprises a router 1 having a plu- 
35 rality of inputs 2 and a plurality of outputs 3,4. The outputs 
3 are represented by a single arrow. The content received on 
an input 2 is a data packet stream, wherein each data packet 
contains address information of at least one receiver. The ad- 
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dress information may comprise individual receiver address in- 
formation or multicast address information, i.e. addresses 
shared by many receivers. In particular the data packets can 
be IP data packets, wherein the system delivers the content to 
5 receivers through a world-wide computer network, such as the 
Internet . 

The router 1, or more generally the processing unit, 
is programmed to divide the data packets of the input data 
stream received on one of the inputs 2 over two or more of the 

10 outputs 3,4, wherein the output 4 is connected to a scrambler 
5 for scrambling the data packets provided on the output 4. 
The scrambled data packets are available on an output 6 of the 
scrambler 4. The data packets on the outputs 3 and 6 can be 
combined into one output data packet stream by means of a sec- 

15 ond router 8 having a plurality of inputs 7 and a plurality of 
outputs 9. It is also possible to use the router 1 for combin- 
ing the data packets on the outputs 3 and 6 into one data 
packet stream. Further, it is also possible to forward the 
output data packet streams of the outputs 3 and 6 directly to 

2 0 the Internet, wherein these IP data packets are combined at 

the receiver side. 

By using the system described, a relatively simple 
scrambler can be used to scramble only a part of the data 
packets of the content data packet stream received on an input 
25 2. The processing unit 1 can also be a relatively low cost ap- 
paratus as a standard router can be used. 

Generally, the router 1 will be programmed to divide 
the content input data packet stream proportionally on the 
outputs 3,4. In case scrambling the data packets of one output 
30 only would result in an insufficiently scrambling of the com- 
plete content data packet stream, it is of course possible to 
use a second scrambler connected to a further output of the 
router 1. This means that two or more outputs 4 will be con- 
nected to corresponding scramblers 5 . In this case the load on 

3 5 the scramblers 5 can be balanced by distributing the data 

packets to be scrambled over the outputs 4 having a scrambler 
5 connected to the same . In this manner a scrambler system is 
obtained comprising a number of relatively low cost scram- 
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biers, wherein the system is adapted to handle high speed 
traffic loads. 

It is further possible to use the system to scramble 
a plurality of different content data packet streams received 
5 on different inputs 2. 

Preferably, the router 1 is programmed such that the 
data packets for the output 4 are selected from the input data 
packet stream in accordance with a predetermined algorithm. 
For example this selection algorithm selects the data packets 

10 to be scrambled such that the unscrambled data packets can be 
used to process the complete data packet stream. 

For a further description reference is made to fig. 2 
showing a system 10 for scrambling content comprising a scram- 
bler 11 for scrambling clear content. The system 10 may in 

15 practice be implemented as a system based on a suitably pro- 
grammed computer. The scrambler 11 analyses the clear content 
stream and is programmed with a first algorithm for selecting 
sections of the clear content stream which should remain un- 
scrambled. The clear content stream can either be analysed for 

20 selecting sections not to be scrambled in a separate step or 
during passing the content stream through the scrambler 11. 

The first algorithm controls the scrambler 11 such 
that selected sections pass the scrambler 11 without being 
scrambled. In this manner, the output 12 of the system 10 pro- 

25 vides a stream of scrambled content with selected sections 

which are unscrambled. The algorithm controlling the operation 
of the scrambler 11 is such that the output stream of the sys- 
tem 10 can not be used by unauthorized users, i.e. the un- 
scrambled sections are insufficient to allow viewing, listen- 

30 ing or the like at an acceptable level. However the unscram- 
bled selected sections in the output data stream of the system 
10 are sufficient to allow certain types of processing of the 
content. As examples for desirable processing of the content 
can be mentioned fast forward, rewind, compression reduction 

3 5 before storage on a storage device and watermarking of the 
content . 

As an example of a suitable algorithm for the control 
of the scrambler 11, it is for example possible to select 10% 
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of the complete content in a regular manner from the content 
stream to be scrambled by the scrambler 11. For example every 
ten seconds of content one second is not scrambled. Of course 
more sophisticated algorithms can be used as will be discussed 
5 hereinafter. 

In case of video content, wherein the content is com- 
pressed according to MPEG algorithm, trick modes are required 
to enable the display of fast forwarded or rewound video im- 
ages in case the viewer moves to a particular point in the 

10 video program. This is typically achieved by grabbing only I- 
frames or every n th I -frame depending on the desired speed of 
rewind or fast forward and to display only these frames on 
screen each frame rapidly after the previous. The possibility 
to identify I -frames in the scrambled data stream can also be 

15 advantageous for allowing a more rapid display of the content 
when hopping to random locations in the content, for example 
to locate a certain scene in a movie. 

Generally this requires knowledge of where I -frames 
are located within the transport stream. The software perform- 

20 ing this operation, scans the transport stream and locates the 
I- frames and sends the I-frames to the decoder of the MPEG 
stream. However, if the content is completely scrambled as in 
prior art systems, the software can not scan for I-frames, but 
must first descramble the stream and then scan for I-frames. 

25 This would normally require a high processing capacity while 
still the time needed to decrypt and scan the stream will pro- 
hibit the desired fast forward or rewind effect. Using the 
system 10 described above will allow these known trick modes 
by using an algorithm controlling the scrambler 11 to leave I- 

3 0 frames in the clear, that is at least the transport packets 
containing I- frame header information. 

The drawing further shows a system 14 for descram- 
bling scrambled content provided by the system 10. The scram- 
bled content can be received by broadcasting, multicasting on 

35 an internet, or can be downloaded from the Internet or the 
like. The system 14 comprises a signal processor 15 for de- 
scrambling a scrambled content stream. The signal processor 15 
receives a scrambled content stream for example from a broad- 
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cast station, the Internet or a storage device 16, such as a 
hard disc, where the content was previously stored. Finally 
the system 14 comprises a control unit 17 by means of which a 
user can control the operation of the descrambling system 14, 
5 for example to start playback, fast forward, rewind or go to a 
desired location in the stream. The signal processor 15 is 
programmed with a second algorithm to scan the data stream for 
clear I- frames to allow these special functions of the system 
14. 

10 If a rewind or fast forward is requested through the 

control unit 17, the signal processor 15 scans the transport 
stream received for clear I-frame header packets and if a 
clear header is found by the signal processor 15 a number of 
subsequent transport packets is descrambled, after which the 

15 descrambled content can be decoded by a conventional MPEG de- 
coder 18. In this manner a performance is obtained that is the 
same as for clear MPEG content. The information left in the 
clear is however insufficient to reconstruct the clear signal 
so that the conditional access is maintained. In the same man- 

2 0 ner the user can hop to a random location in the content 

stream, wherein the signal processor 15 first identifies a 
clear I-frame header and thereafter starts descrambling. 

It is noted that the number I-frame headers which are 
left in the clear is optional. It is not necessary to leave 

25 every I-frame header in the clear; for example every fifth or 
tenth I-frame header may be left in the clear depending on the 
desired effect of fast forward or rewind. Further it is noted 
that it is not necessary to leave the full I-frame header in 
the clear. It is possible to leave only the first or transport 

30 packet in the clear. For, the processing unit only needs to be 
able to determine the location of the I-frame headers and it 
is not necessary to scan all details carried in the header. In 
this respect it is. noted that it would even be possible to in- 
sert predetermined flags into the transport stream signalling 

35 the processing unit to forward a number of packets to the sig- 
nal processor. 

As another application, the system of the invention 
can be used to further compress the content for storage on the 
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storage device 16. As digital video and audio are of very high 
quality in comparison to analogue VHS tape quality, a part of 
the high digital quality can be sacrificed for increased stor- 
age capacity. Such further compression can for example be 
5 achieved by changing the quantisation of coefficients in the 
macro blocks of an MPEG compressed sequence. As known, in 
MPEG compression image information is divided into macro 
blocks. To increase storage capacity, the quantisation level 
of macro blocks is reduced. Thereby bits and samples are 
10 thrown away reducing the bit rate and the quality simultane- 
ously. 

In order to allow such type of further compression, 
the algorithm controlling the operation of scrambler 11 leaves 
macro block information in the clear, whereas most of the 

15 other information in the signal is scrambled by the scrambler 
11. Although most macro block information is left in the 
clear, it is still impossible to reconstruct a reasonable 
video image with only macro block information. It is noted 
that it is not necessary to leave all macro blocks in the 

2 0 clear. In this case the algorithm controlling the operation of 
signal processor 15 of the system 14 is such that the signal 
processor scans the stream for clear macro blocks and reduces 
the quantisation level before storing the data stream to disc 
9 . 

25 Preferably an algorithm is used leaving macro blocks 

in the clear the compression of which has as less impact on 
the quality as possible. For example, macro blocks can be left 
in the clear depending on the type of scenes or its location 
in the screen. 

30 As a further application, the systems described can 

be used to watermark the scrambled content received. The sig- 
nal processor 15 scans the scrambled transport stream for 
clear data packets and adds a watermark provided by a water- 
marking device 19 to the clear data packet (s) . 

35 In the above examples the second algorithm allows 

specific desired processing of the scrambled content by the 
signal processorl5. The first algorithm in the system 10 can 
however also be adapted to provide an output 12 with a maximum 
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number of unscrambled sections still preventing unauthorized 
normal use of the scrambled content at an acceptable level. In 
this case the second algorithm of the signal processor 15 is 
just a descrambling algorithm. This results in a high perform- 
ance of the descrambling operation in the signal processor 15 
at a reduced processing capacity. 

Although in the examples video content is mentioned, 
it will be clear that the invention can also be used on audio 
or still images. 

From the above it will be understood that the inven- 
tion provides a system wherein by intelligently scrambling 
content, the scrambled content can still be processed. 

The invention is not restricted to the above de- 
scribed embodiments which can be varied in a number of ways 
within the scope of the attached claims. 
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CLAIMS 



1. System for providing scrambled content, wherein 
the content is a data packet stream, each data packet contain- 
ing at least one address, characterized in that the system 
comprises a first processing unit (1) having at least one in- 

5 put (2) adapted to receive the content data packet stream to 
be scrambled, and a plurality of outputs (3,4), wherein the 
processing unit is programmed to divide the data packets of 
the content data packet stream over at least two or more of 
the outputs, wherein at least one output (4) is connected to a 
10 corresponding scrambler (5) to scramble the data packets re- 
ceived from this output. 

2. System according to claim 1, wherein the first 
processing unit (1) is programmed to select the data packets 
for said at least one output (4) from the content data packet 

15 stream in accordance with a predetermined algorithm. 

3. System according to claim 1 or 2 , wherein a sec- 
ond processing unit (8) is provided to combine the data pack- 
ets of said two or more outputs (3,4) of the first processing 
unit (1) into one data packet stream including the scrambled 

20 data packets. 

4. System according to claim 3, wherein the first 
and second processing units are made as a single processing 
unit (1) . 

5 . System according to any one of the preceding 
25 claims, wherein a router is used as processing unit. 

6. System (10) for scrambling content, comprising a 
scrambler (11) for scrambling the content, characterized in 
that the scrambler (11) is programmed with a first algorithm 
for selecting sections from the content to be scrambled, 

30 wherein the first algorithm controls the scrambler to pass the 
selected sections unscrambled, wherein the first algorithm is 
such that the scrambled content with the selected sections can 
be processed according to a second algorithm. 

7. System according to claim 6, wherein at least a 
35 plurality of sections include a section header, wherein the 

first algorithm controls the scrambler (11) to pass section 
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headers unscrambled. 

8. System according to claim 7 , wherein the sections 
comprises a plurality of transport packets, wherein the first 
algorithm controls the scrambler (11) to pass only one or more 

5 transport packets of section headers unscrambled. 

9. System according to claim 6, wherein the sections 
include macroblocks, wherein the first algorithm controls the 
scrambler to pass macroblocks unscrambled. 

10. System according to claim 9, wherein the content 
10 is video content, wherein the first algorithm selects the mac- 
roblocks depending on the location in the screen or amount of 
redundant data. 

11. System according to anyone of claims 6-10, 
wherein the first algorithm is adapted to provide a maximum 

15 number of unscrambled sections in the scrambled content, 

wherein the second algorithm comprises a descrambling algo- 
rithm. 

12. System (14) for descrambling scrambled content, 
comprising a storage device (16) for storing scrambled con- 

20 tent, and a signal processor (15) for descrambling received or 
stored scrambled content, characterized in that the signal 
processor (15) is programmed with the second algorithm to scan 
the received and/or stored scrambled content for unscrambled 
sections and to process at least the unscrambled sections. 

25 13. System according to claim 12, wherein, in case of 

stored scrambled content, the second algorithm instructs the 
signal processor (15) to descramble one or more sections fol- 
lowing the unscrambled sections. 

14. System according to claim 12 or 13, wherein, in 
3 0 case of received scrambled content, the second algorithm in- 
structs the signal processor (15) to reduce the compression of 
the inserted selected sections, preferably by reducing the 
quantisation level of the unscrambled sections. 

15. System according to claim 12, wherein the second 
35 algorithm instructs the signal processor (15) to add a water- 
mark to the unscrambled sections. 
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